https://meta.wikimedia.org/wiki/Special:CentralAuth/~2023-27459-O41
- This should've been prevented.
- It's currently unclear how many accounts with names beginning with ~2 are there.
- This blocks T349507
Description
Description
Details
Details
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Restricted Task | |||||
| Resolved | kostajh | T294511 2021 Security Team wikireplicas audit | |||
| Declined | None | T284948 Raw IPs of logged-out users disclosed in wiki-replicas | |||
| In Progress | Niharika | T324492 Temporary accounts - MVP | |||
| Resolved | Niharika | T345760 [Epic] Temporary username format | |||
| Resolved | Tchanders | T345855 Update temporary username format | |||
| Resolved | Dreamy_Jazz | T349506 Set temporary user pattern configuration on production ahead of testwiki deployment | |||
| Resolved | sgrabarczuk | T349507 Rename user accounts starting with ~2 | |||
| Resolved | BUG REPORT | Tchanders | T361021 New accounts with names beginning with ~2 are created |
Event Timeline
Comment Actions
Change #1014559 had a related patch set uploaded (by Tchanders; author: Tchanders):
[operations/mediawiki-config@master] Prevent new user names matching the temporary account pattern
Comment Actions
It's currently unclear how many accounts with names beginning with ~2 are there.
@Niharika Could you re-run the analysis on the user names starting with ~2?
Comment Actions
This should've been prevented.
The config patch should prevent this once it's deployed.
Comment Actions
Change #1014559 merged by jenkins-bot:
[operations/mediawiki-config@master] Prevent new user names matching the temporary account pattern
Comment Actions
Mentioned in SAL (#wikimedia-operations) [2024-03-27T14:02:53Z] <dreamyjazz@deploy1002> Started scap: Backport for [[gerrit:1014559|Prevent new user names matching the temporary account pattern (T361021 T349506)]]
Comment Actions
Mentioned in SAL (#wikimedia-operations) [2024-03-27T14:05:56Z] <dreamyjazz@deploy1002> dreamyjazz and tchanders: Backport for [[gerrit:1014559|Prevent new user names matching the temporary account pattern (T361021 T349506)]] synced to the testservers (https://wikitech.wikimedia.org/wiki/Mwdebug)
Comment Actions
Mentioned in SAL (#wikimedia-operations) [2024-03-27T14:17:21Z] <dreamyjazz@deploy1002> Finished scap: Backport for [[gerrit:1014559|Prevent new user names matching the temporary account pattern (T361021 T349506)]] (duration: 14m 28s)
Comment Actions
Suggested QA steps for a WMF production wiki (such as testwiki):
- Attempt to create a account with the prefix ~
- Verify that the username is considered invalid and you cannot create an account.
Comment Actions
I can confirm on testwiki that I cannot create username ~2024-7889 either via Special:CreateAccount or the API. In both cases I am told You have not specified a valid username.
Comment Actions
Change #1015072 had a related patch set uploaded (by Tchanders; author: Tchanders):
[operations/mediawiki-config@master] Scope temp user reserved pattern to temp users
Comment Actions
Change #1015072 merged by jenkins-bot:
[operations/mediawiki-config@master] Scope temp user reserved pattern to temp users
Comment Actions
Mentioned in SAL (#wikimedia-operations) [2024-03-27T20:07:58Z] <jhuneidi@deploy1002> Started scap: Backport for [[gerrit:1015072|Scope temp user reserved pattern to temp users (T361021 T349506)]], [[gerrit:1015095|Updates config to deploy vector 2022 (T360628)]]
Comment Actions
Mentioned in SAL (#wikimedia-operations) [2024-03-27T20:10:30Z] <jhuneidi@deploy1002> ksarabia and jhuneidi and tchanders: Backport for [[gerrit:1015072|Scope temp user reserved pattern to temp users (T361021 T349506)]], [[gerrit:1015095|Updates config to deploy vector 2022 (T360628)]] synced to the testservers (https://wikitech.wikimedia.org/wiki/Mwdebug)
Comment Actions
Mentioned in SAL (#wikimedia-operations) [2024-03-27T20:26:56Z] <jhuneidi@deploy1002> Finished scap: Backport for [[gerrit:1015072|Scope temp user reserved pattern to temp users (T361021 T349506)]], [[gerrit:1015095|Updates config to deploy vector 2022 (T360628)]] (duration: 18m 57s)